Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
grpc-ts-health-check
Advanced tools
An implementation of gRPC health checks, written in typescript.
It is assumed that you are using the grpc
library.
npm install grpc-ts-health-check --save
Install the grpc
library:
npm install grpc --save
Below is a list of available methods:
watch(request)
Set the initial status of the service and continues to watch for any changes.
request
- the HealthCheckRequest
object.const healthClient = new HealthClient(`${host}:${port}`, grpc.credentials.createInsecure());
const request = new HealthCheckRequest();
request.setService(serviceName);
const healthStream = healthClient.watch(request);
healthStream.on('data', (response: HealthCheckResponse) => {
AppLogger.logger.debug(`Health Status: ${response.getStatus()}`);
});
check(request)
Checks the status of the service once.
request
- the HealthCheckRequest
object.const healthClient = new HealthClient(`${host}:${port}`, grpc.credentials.createInsecure());
const request = new HealthCheckRequest();
request.setService(serviceName);
healthClient.check(request, (error: Error | null, response: HealthCheckResponse) => {
if (error) {
AppLogger.logger.error('Health Check Failed', error);
} else {
AppLogger.logger.debug(`Health Status: ${response.getStatus()}`);
}
});
import * as grpc from 'grpc';
import { GrpcHealthCheck, HealthCheckResponse, HealthService } from 'grpc-ts-health-check';
const serviceName = 'auth.Authenticator';
const healthCheckStatusMap = {
serviceName: HealthCheckResponse.ServingStatus.UNKNOWN
};
function start(): grpc.Server {
// Create the server
const server: grpc.Server = new grpc.Server();
// Register the health service
const grpcHealthCheck = new GrpcHealthCheck(healthCheckStatusMap);
server.addService(HealthService, grpcHealthCheck);
// Bind and start the server
server.bind('localhost:9090', grpc.ServerCredentials.createInsecure());
server.start();
// Create the health client
const healthClient = new HealthClient(`${host}:${port}`, grpc.credentials.createInsecure());
const request = new HealthCheckRequest();
request.setService(serviceName);
// Watch health status - streaming request
// This will set the initial health status
// and continue to watch the service for changes.
const healthStream = healthClient.watch(request);
healthStream.on('data', (response: HealthCheckResponse) => {
AppLogger.logger.debug(`Authenticator Service: Health Status: ${response.getStatus()}`);
});
// Check health status - single request
// This will provide the current health status
// of the service when the request is executed.
setTimeout(() => {
healthClient.check(request, (error: Error | null, response: HealthCheckResponse) => {
if (error) {
AppLogger.logger.error('Authenticator Service: Health Check Failed', error);
} else {
AppLogger.logger.debug(
`Authenticator Service: Health Check Status: ${response.getStatus()}`
);
}
});
}, 5000);
return server;
}
FAQs
An implementation of gRPC health checks, written in typescript.
We found that grpc-ts-health-check demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.